The following error is displayed when binding LDAPS on XenMobile:

(LDAP communication error: javax.naming.CommunicationException: simple bind failed: domain-controller-binding-to:636 [Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Complete the following steps to fix this issue:

1. Ensure that you have extracted the correct Domain Controller certificate that you are trying to bind using MMC from the Domain Controller itself.

2. If binding to multiple Domain Controllers, it is recommended to use your main root Domain Controller's certificate that should cover all existing Domain Controllers for binding.

3. Upload your new LDAPS certificate into existing certificate store. Or create new if password is forgotten. (Applicable only for XDM9 and earlier).

4. Rebind.

Problem Cause

The certificate that is being used to bind is from a different Domain Controller when compared to the one it was binded.

CTX200823 - LDAP Communication Error on XenMobile Device Manager